Commit Graph

435 Commits

Author SHA1 Message Date
Tad
fe6f853746 mako: add back LTE support patch 2018-05-30 03:45:43 -04:00
Tad
ab9487fea1 Tweaks 2018-05-29 13:30:37 -04:00
Tad
f9f893a443 Hamper the ad/analytics libraries! 2018-05-21 05:28:07 -04:00
Tad
67db210756 Many changes
- 15.1: Fixup ether here too
- Change F-Droid application id to allow installation of official F-Droid side by side
- Remove FDroidPriv patch and use sed instead
- Optimize: Switch VM_MAX_READAHEAD to 512KB
- Misc tweaks
- Update TODO
2018-05-20 23:30:40 -04:00
Tad
dfaf44387b Update CVE patchers 2018-05-17 16:42:42 -04:00
Tad
f30d5cd7f2 Update links 2018-05-13 22:21:42 -04:00
Tad
5695712cf4 Many changes
- Add support to scan for malware in certain directories
- 15.1: Add new device, griffin
- Note deprecation status of various devices
- Add a few blobs to the deblobber
2018-05-10 23:46:18 -04:00
Tad
966c9c8509 Change connectivity check URLs 2018-05-08 20:56:02 -04:00
Tad
e22d028cbd Switch DNS back to OpenNIC for now 2018-05-08 16:04:41 -04:00
Tad
f5fd480f56 Update CVE patchers 2018-05-07 16:20:58 -04:00
Tad
2054759724 Fix inclusion of LocalCalendar 2018-05-03 10:22:04 -04:00
Tad
ee6788df1e Switch from OpenNIC to Cloudflare DNS 2018-05-03 07:38:32 -04:00
Tad
8220c2fd11 Prepare potential future inclusion of DNS66 2018-04-28 21:50:06 -04:00
Tad
b30c62629b Revert "Strong AES patch changes"
This reverts commit 60b85e10fe.
2018-04-28 15:35:53 -04:00
Tad
60b85e10fe Strong AES patch changes 2018-04-28 15:25:42 -04:00
Tad
999c94d2de Update CVE patchers 2018-04-28 00:43:08 -04:00
Tad
5f18a38e8f 15.1: Remove Lineage logo from recovery 2018-04-24 12:16:46 -04:00
Tad
f122ccb9f1 Many changes
- Disable patches with restrictive licenses by default
- Update LICENSE
- Fixup the fix for F-Droid building
- 15.1: Fix forceencrypt on mako
- 15.1: Fix crashes when accessing factory reset and development settings menus
 on devices without support for factory reset protection or oem unlocking
2018-04-23 15:42:27 -04:00
Tad
28600556b4 Many changes
- Add a variable to control inclusion of patches under a restrictive license
- Fix F-Droid building
- Add a buildDeviceDebug function that disables signing
- Misc tweaks/cleanup
- 15.1: Revert trust_interface cherry picks until official
2018-04-23 08:44:50 -04:00
Tad
f041047983 15.1: Initial deny new usb support from CopperheadOS
This is an extremely powerful security feature with minimal downsides.
Original credit goes to Grsecurity
Android port goes to Copperhead
2018-04-22 11:35:56 -04:00
Tad
28de039beb Update CVE patchers 2018-04-22 02:41:18 -04:00
Tad
a45a9be0e9 15.1: Updates & Fixes 2018-04-19 21:26:11 -04:00
Tad
b8937a6400 14.1: Fix herolte, both: replace Gallery2 with CameraRoll 2018-04-14 02:27:01 -04:00
Tad
de78fb8b9a Update CVE patchers 2018-04-13 15:29:21 -04:00
Tad
1fa75dcb65 15.1: More fixes 2018-04-12 09:26:03 -04:00
Tad
a914c813b0 15.1: Fixes, 14.1: Cleanup 2018-04-10 19:24:39 -04:00
Tad
f3a92223a5 Fix updater 2018-04-06 21:50:20 -04:00
Tad
fcea2b8d1d Lots of cleanup
- Some overclocks might be missing'
2018-04-06 14:10:43 -04:00
Tad
a661c4cde5 14.1: Drop mako 2018-04-06 13:58:48 -04:00
Tad
b2d1b93dcb 14.1: Drop bacon and m8, 15.1: Many more fixes 2018-04-04 21:24:08 -04:00
Tad
7933a5a1fc Many changes
- Remove LineageOS 11.0 again
- 15.1: Cleanup
- 15.1: More cherry picks
2018-04-03 18:36:22 -04:00
Tad
7a29793ee5 15.1: Really fix build signing 2018-04-03 14:55:28 -04:00
Tad
8e475113ef Update build signing patches 2018-04-03 12:34:00 -04:00
Tad
fa2987d3dc 15.1: More fixes and cleanup 2018-04-03 10:56:28 -04:00
Tad
42da60142c 15.1: Many fixes 2018-04-03 09:10:49 -04:00
Tad
f186d33fdb 15.1: minor fixes 2018-04-03 05:08:13 -04:00
Tad
421cbe65b3 Add back LineageOS 11.0 support again
Why do I keep doing this?
2018-03-31 19:03:43 -04:00
Tad
4f9299f900 Update CVE patchers 2018-03-30 21:47:33 -04:00
Tad
147ab4667e SetupWizard: Switch to our (temp) logo 2018-03-28 16:14:03 -04:00
Tad
8a9cd5c57c SetupWizard: Remove Lineage logo until we can replace it 2018-03-28 01:15:59 -04:00
Tad
e634a22758 14.1: Update default workspaces 2018-03-28 01:07:36 -04:00
Tad
2d8bab800c Many Changes
- Remove more projects via manifests
- Fix FDroidPrivExt inclusion
- 14.1: Remove Jelly
- Remove leftovers from LG G2
2018-03-23 12:37:26 -04:00
Tad
800bd2f985 Move Fennec DOS shim to PrebuiltApps repo 2018-03-23 10:00:33 -04:00
Tad
d9318b61e6 Fix zip name and Fennec DOS shim 2018-03-23 09:37:08 -04:00
Tad
e533bc7607 Cleanup 2018-03-22 08:32:01 -04:00
Tad
3ceff683a8 Rebase FDroidPriv patch and cleanup privacy guard changes 2018-03-21 20:50:45 -04:00
Tad
2a1b88cab3 Cleanup 2018-03-18 12:48:08 -04:00
Tad
f5e2d2dece Many fixes 2018-03-14 14:31:08 -04:00
Tad
e4435f9eac Tweaks and cleanup 2018-03-14 00:41:05 -04:00
Tad
4053ad6082 Initial support for including prebuilt apps from F-Droid
FDroid will come later, microG will probably stay as is.
2018-03-13 23:07:41 -04:00
Tad
d111027f4d Many changes
15.1: Update CVE patchers
15.1: Add back automated build signing
14.1: Disable herolte (broken)
14.1: March 2018 Security Bulletin
2018-03-08 22:06:18 -05:00
Tad
9c2272bc03 14.1: Update CVE patchers 2018-03-07 00:07:45 -05:00
Tad
eea5b71bd4 14.1: Drop 5 devices supported by 15.1 2018-03-01 09:51:05 -05:00
Tad
90ecbd9857 15.1: More fixes 2018-02-28 08:22:35 -05:00
Tad
199ffada5b 15.1: Remove analytics from SUW 2018-02-28 08:13:34 -05:00
Tad
ac990f0491 15.1: Cleanup 2018-02-28 08:12:30 -05:00
Tad
994a069deb Remove JustArchi's compiler flag optimizations
While some tasks complete slightly faster overall there are too many downsides
- Too large system images
- Weird compiler errors
- Performance regressions on some devices
- General maintenance overhead

Maybe a less aggressive variant can be brought back in the future
2018-02-25 19:56:29 -05:00
Tad
9cdfc59d5e 14.1: Update CVE patchers 2018-02-19 15:01:57 -05:00
Tad
f7abbe151d 15.1: Even more build fixes 2018-02-12 07:28:04 -05:00
Tad
9b391e88f9 15.1: More build fixes 2018-02-12 07:10:10 -05:00
Tad
910ee5ad76 15.1: Build fixes 2018-02-12 05:28:24 -05:00
Tad
e16aa10199 15.1: Initial building support 2018-02-12 04:57:49 -05:00
Tad
4ee1a52cef 15.1: More aux work on rebase 2018-02-12 04:00:28 -05:00
Tad
96edc2acc6 15.1: Much more work on rebase 2018-02-12 03:43:26 -05:00
Tad
48d9b9daaa Update CVE patchers and add a helper patch function 2018-02-05 19:21:44 -05:00
Tad
d3a231e2be Many build fixes
- Deblobber: sh -> bash (potential fix)
- Mark h815 as broken upstream
- Fix h850
- Fix herolte
- Fix Z00T
2018-01-31 13:14:19 -05:00
Tad
f5e79a3d11 Minor tweaks and update CVE patchers 2018-01-30 02:18:38 -05:00
Tad
ed6b73793b Many changes
- Recovery: Squash menus
- dexpreopt boot of all devices
- Update device todo list
2018-01-20 07:36:08 -05:00
Tad
4b5717b6b7 -O3 ALL THE THINGS! Use JustArchi's compiler flags 2018-01-19 05:41:08 -05:00
Tad
e3d6171053 Update CVE patchers 2018-01-16 19:55:07 -05:00
Tad
a84bf140fe Fix thor overclock and clark recovery 2018-01-12 09:26:54 -05:00
Tad
bad18d67fc Improved thor overclocks 2018-01-11 20:39:49 -05:00
Tad
3491639412 Overclock thor 2018-01-11 20:29:37 -05:00
Tad
96104d6a2d Overclock mako 2018-01-11 15:58:04 -05:00
Tad
7ec6b4cf88 Overclocks for msm8992 2018-01-11 15:00:46 -05:00
Tad
77cc7f1341 More overclocks 2018-01-11 14:31:17 -05:00
Tad
6fb82b7907 Attempt to improve AES performance 2018-01-11 14:16:13 -05:00
Tad
85895baa66 Update CVE patchers 2018-01-10 15:24:05 -05:00
Tad
97bb50e125 Update CVE patchers 2018-01-10 02:20:35 -05:00
Tad
86234066dc Patch most 3.10 kernels against Spectre 2018-01-04 19:52:32 -05:00
Tad
a4cde9bb89 Update CVE patchers 2018-01-04 13:34:44 -05:00
Tad
1402e9b041 Update CVE patchers 2018-01-04 13:17:29 -05:00
Tad
e5cbc542ea Misc changes 2018-01-03 21:55:04 -05:00
Tad
eb32600c0b Fix AES256 encryption patch, and update CVE patchers 2018-01-03 12:15:58 -05:00
Tad
7446b2d304 Move enter to functions.sh, and move overclocks to overclock.sh 2018-01-02 20:19:09 -05:00
Tad
a350cd92f1 Patch for AES256 encryption 2018-01-01 14:49:15 -05:00
Tad
8a4f0bef72 Many changes
- Disable removal of AudioFX blobs, as it breaks audio on some devices
- Enable LG G3 overclocks
- Switch mako from test to release
- Disable force-enabling of GLONASS
2017-12-31 09:09:46 -05:00
Tad
758088bde2 Update CVE patchers 2017-12-30 07:11:23 -05:00
Tad
0861d217ae General updated, and LG G3 overclocking 2017-12-30 04:39:32 -05:00
Tad
406a4ebf6e Disable Fennec DOS shim 2017-12-24 20:59:00 -05:00
Tad
176d22c6bb Update CVE patchers 2017-12-20 14:29:33 -05:00
Tad
d3cf423227 Add a shim to install Fennec DOS 2017-12-19 20:01:17 -05:00
Tad
d740b10822 DNS changes 2017-12-19 17:03:38 -05:00
Tad
ba66e7477c Compile DejaVu 2017-12-19 16:55:30 -05:00
Tad
fe6e553cbb Remove n800 2017-12-19 16:32:07 -05:00
Tad
397ab78e21 Remove some broken patches 2017-12-19 00:18:10 -05:00
Tad
fcc8ffc5bd Tweaks and Fixes 2017-12-15 16:42:36 -05:00
Tad
f65bbb8ee0 Many improvements to the hardenDefconfig function 2017-12-09 13:27:49 -05:00
Tad
07b6c89e07 Fix bootloops with hardened defconfig 2017-12-09 05:52:59 -05:00
Tad
ef401964f7 Improvements 2017-12-09 02:07:54 -05:00
Tad
2091d44aa3 Add CVE patchers for various Android repos 2017-12-08 23:13:11 -05:00
Tad
0bda7c939e Android CVE patches submodule 2017-12-08 22:25:37 -05:00
Tad
b5c8ef6bc3 Update CVE patchers 2017-12-08 18:59:55 -05:00
Tad
11cc70ef35 Privacy guard improvements and update CVE patchers 2017-12-08 08:18:39 -05:00
Tad
1bd7aab805 Update CVE patchers 2017-12-07 20:20:48 -05:00
Tad
90d7413c04 Update CVE patchers 2017-12-05 19:42:36 -05:00
Tad
3dd9a262df Update CVE patchers with CopperheadOS kernel hardning patches 2017-12-05 18:22:31 -05:00
Tad
dd460da4c3 Build fixes 2017-12-05 11:26:57 -05:00
Tad
face62a675 Fixes 2017-12-04 22:48:33 -05:00
Tad
f93366c8e7 Update CVE patchers 2017-12-04 19:08:04 -05:00
Tad
9bed70363b Update CVE patchers 2017-12-04 18:49:19 -05:00
Tad
dd7454b664 Update CVE patchers 2017-12-01 17:02:23 -05:00
Tad
98dcb87cc8 Update submodules 2017-12-01 16:20:29 -05:00
Tad
9202c0a972 Submodules? 2017-12-01 16:19:36 -05:00
Tad
8e7e492c04 Submodules! 2017-11-28 12:28:55 -05:00
Tad
30e0d5e980 Move Linux patches out of repo 2017-11-28 12:18:40 -05:00
Tad
39337477bf Fixes 2017-11-26 12:43:47 -05:00
Tad
67e224cb1a Many new CVE patches 2017-11-25 19:39:02 -05:00
Tad
5e6208ece9 Firmware deblobber fixes 2017-11-12 09:23:12 -05:00
Tad
557d18a471 Firmware deblobber: Fix mounting /firmware 2017-11-11 09:40:23 -05:00
Tad
35a449dc82 Firmware Deblobber: Make device agnostic, remove more blobs 2017-11-11 07:27:00 -05:00
Tad
5dfb34d47d Inline the firmware deblobber 2017-11-11 06:46:58 -05:00
Tad
dec73c392c Add a qs tile for controlling radio power 2017-11-10 17:28:44 -05:00
Tad
7d4faa1ef8 More patches 2017-11-10 12:23:07 -05:00
Tad
1b74baddf0 Patch against towelroot 2017-11-10 03:06:09 -05:00
Tad
2711871d50 PAPP: Add more apps 2017-11-09 20:56:11 -05:00
Tad
b84f0881b0 Version the previous USB patches 2017-11-08 13:13:06 -05:00
Tad
7b3c994731 Update CVE patchers 2017-11-08 03:42:33 -05:00
Tad
aaa94329a5 Add more patches 2017-11-08 03:23:39 -05:00
Tad
397e66c977 CVE Build fixes 2017-11-07 23:45:28 -05:00
Tad
2bec4f071d Actually add the patches 2017-11-07 22:50:43 -05:00
Tad
d86c2f7d55 More CVE patches 2017-11-07 22:47:52 -05:00
Tad
42e8062935 More patches 2017-11-07 22:03:58 -05:00
Tad
7c0049f494 Update CVE patchers 2017-11-07 21:54:21 -05:00
Tad
6ce51b2775 More patches 2017-11-07 21:38:42 -05:00
Tad
e2e5a3d9e1 Patch fixes 2017-11-07 20:32:38 -05:00
Tad
8ed308c888 Update CVE pathcers against new patches 2017-11-07 20:00:37 -05:00
Tad
529ce03a13 Fixup wireless patches 2017-11-07 18:55:10 -05:00
Tad
11c7037780 Switch to new CVE patchset 2017-11-07 17:32:46 -05:00
Tad
57ce42402b Patch list fixes 2017-11-07 16:31:15 -05:00
Tad
4b3a3a4e50 Replace CVE list with a sorted list 2017-11-07 14:42:05 -05:00
Tad
f5e47ed233 Even more CVEs 2017-11-07 05:29:23 -05:00
Tad
7d50b9bcfa Add more CVE patces from LineageOS 2017-11-07 05:20:31 -05:00
Tad
58be4b7c58 Add an extremely detailed list of Linux CVE patches
It only took 7 hours!
2017-11-07 04:35:41 -05:00
Tad
0a2f23c228 LAOS-11.0 and nex Fixes 2017-11-06 20:26:28 -05:00
Tad
5bc79a7ad7 Restore nex/11.0 and cleanup 2017-11-06 15:34:40 -05:00
Tad
db7f521c28 Update FDroid repos 2017-11-05 23:19:53 -05:00
Tad
848056f0ff Remove more blobs, update FDroid repos 2017-11-05 18:39:54 -05:00
Tad
112384f039 Fixes 2017-11-05 16:49:52 -05:00
Tad
a42e8a5243 Add initial support for 7 more devices 2017-11-05 13:56:37 -05:00
Tad
7ffb675a15 Licensing fixes, and misc fixes 2017-11-05 10:58:01 -05:00
Tad
b1b71f43c6 Replace wallpapers with out own better ones, Replace FDroid repo patch with just the file instead 2017-11-04 09:47:54 -04:00
Tad
f5e96522e1 Fixes 2017-11-02 19:35:27 -04:00
Tad
5cce7e4c37 Add CVE patcher for nex 2017-11-02 19:09:39 -04:00
Tad
6cb184876a More KRACK patches 2017-11-02 16:48:37 -04:00
Tad
c3c75e7b73 Revert "CVE Patchers: Switch to 3way, patch ~552 CVEs"
This reverts commit 7d24041ae3.

A quick sanity check against cve.lineageos.org shows most of these are patched already.
--3way == bad way
2017-11-02 16:01:55 -04:00
Tad
7d24041ae3 CVE Patchers: Switch to 3way, patch ~552 CVEs
I hope this doesn't break compile... it probably will and this will end up reverted :(
2017-11-02 15:57:46 -04:00
Tad
79daadb5ef Update CVE patchers for ranged versions, patching 1 CVE 2017-11-02 15:26:49 -04:00
Tad
7c31506e56 CVE Patches: ranged versions 2017-11-02 15:07:05 -04:00
Tad
43e4a7035d Patch 30 more CVEs 2017-10-31 13:44:26 -04:00
Tad
77fc7b452c Fix empty CVE patches 2017-10-31 13:24:35 -04:00
Tad
9a09d20695 Disable patch for CVE-2016-0819 2017-10-30 22:46:23 -04:00
Tad
64d490d95e Remove network hardening patches, disable mako LTE patch, add function to enable forceencrypt 2017-10-30 17:38:00 -04:00
Tad
41b11b0273 Fully patch against KRACK 2017-10-30 01:13:51 -04:00
Tad
3afd709762 Remove duplicate cve patches and update CVE patchers 2017-10-29 22:33:38 -04:00
Tad
3989a1b20b Update Linux CVE patches 2017-10-29 22:14:37 -04:00
Tad
12b63c12b7 Remove some duplicate CVE patches and add back fixed CVE patcher scripts 2017-10-29 21:26:04 -04:00
Tad
548fbd1b50 New patchers 2017-10-29 16:25:37 -04:00
Tad
942c68a4d1 Remove invalid CVE patches 2017-10-29 16:01:30 -04:00
Tad
948a8760e2 Update CVE patches 2017-10-29 15:58:20 -04:00
Tad
92a0187dfb Overhaul CVE patches 2017-10-29 14:23:02 -04:00
Tad
ce59045163 Add some more Linux CVE patches 2017-10-29 04:19:13 -04:00
Tad
86c2d7a648 Remove many duplicate linux CVE patches and update patchers 2017-10-29 03:46:24 -04:00
Tad
75099b9404 Add patches for many Linux CVEs, and overhaul script paths 2017-10-29 01:48:53 -04:00
Tad
8c8dc284c9 Last patch prob doesnt fix that 2017-10-22 23:29:46 -04:00
Tad
106e5d1708 Add a patch to fix the keystore 2017-10-22 23:24:07 -04:00
Tad
d2d343b49c More fixes 2017-10-21 11:53:21 -04:00
Tad
f6fc3918aa More fixes 2017-10-21 09:10:23 -04:00
Tad
d9f56cc8ff More fixes 2017-10-21 00:39:22 -04:00
Tad
0975c5251b More fixes 2017-10-20 19:57:01 -04:00
Tad
8890e8cadd Fixup last 2 commits 2017-10-20 19:00:24 -04:00
Tad
0a238fd21e Overhaul last commit 2017-10-20 16:54:46 -04:00
Tad
b3108b9e7f Initial implementation of allowing the user to reduce screen resolution to save power 2017-10-20 15:31:04 -04:00
Tad
8168ab2db7 Replace theming patch with script 2017-10-18 12:11:10 -04:00
Tad
ffe640b21d Fix setupwizard patch and change the default accent color system wide 2017-10-18 11:59:50 -04:00
Tad
f810d0691d Fixes and remove boot anim 2017-10-18 10:00:05 -04:00
Tad
26acf27638 Add a temporary boot animation 2017-10-18 08:16:12 -04:00
Tad
4dc9f05915 Add a rebranding script and remove cmstats from SetupWizard 2017-10-18 07:54:56 -04:00
Tad
c4cdf17325 Fixes 2017-10-16 14:25:36 -04:00
Tad
c9df695f0c Fixes and switch to new updater parameters 2017-10-06 20:44:56 -04:00
Tad
f835a6e5f1 Add a patch for tri-state torch on clark 2017-10-04 20:32:48 -04:00
Tad
1535a984ae Remove SVOX patch, enable GLONASS and XTRA HTTPS for all devices 2017-10-03 05:41:25 -04:00
Tad
61fd3702ce Fixes 2017-09-15 20:16:51 -04:00
Tad
70ad6ff700 Switch from CM to LAOS updater 2017-08-26 16:07:10 -04:00
Tad
343cb8ee5b Fix LTE only patch 2017-08-16 11:27:10 -04:00
Tad
36691a61cb PAPP add two more apps 2017-07-25 13:57:27 -04:00
Tad
79975a9112 PAPP more apps 2017-07-23 18:45:12 -04:00
Tad
612c0a8cbf Disable LTE only patch 2017-07-19 04:10:19 -04:00
Tad
ce9c9f83c9 Quick fix 2017-07-18 22:47:31 -04:00
Tad
7bcd9ce09f Update changelog 2017-07-18 21:45:21 -04:00